Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-31503

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6ppg-rgrg-f573

Dolibarr vulnerable to Cross-Site Request Forgery Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover.

gitlab/packagist/dolibarr/dolibarr/CVE-2024-31503

Dolibarr vulnerable to Cross-Site Request Forgery Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover.